Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/boux6vJkrVz0obH811aMP6u1B90.roa
File: boux6vJkrVz0obH811aMP6u1B90.roa (raw, json)
Hash identifier: rVmoxv4eeLZbFZoOpgBs8vpeTC+IkuAnyzlsaufTxic=
Subject key identifier: 6E:8B:B1:EA:F2:64:AD:5C:F4:A1:B1:FC:D7:56:8C:3F:AB:B5:07:DD
Certificate issuer: /CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Certificate serial: 018682F0F559654E07FB8852549338EC8B19
Authority key identifier: 13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/boux6vJkrVz0obH811aMP6u1B90.roa
Signing time: Fri 24 Feb 2023 10:21:14 +0000
ROA not before: Fri 24 Feb 2023 10:21:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 193.163.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:f0:f5:59:65:4e:07:fb:88:52:54:93:38:ec:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a5bdd2d61eba8efc9ca9cc632d802ae1f3d2c1
Validity
Not Before: Feb 24 10:21:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e8bb1eaf264ad5cf4a1b1fcd7568c3fabb507dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e8:57:d1:3e:80:89:36:64:1e:7a:6b:d5:a7:
3b:03:fa:1a:9d:c3:39:56:81:33:5c:de:d6:13:3c:
4a:3d:4a:a4:16:d1:74:2b:38:4b:c7:5e:2a:07:c0:
18:5f:06:07:52:6a:f7:b9:51:f4:c9:22:50:ec:7d:
97:49:f1:4c:08:b5:d7:2b:d8:be:31:19:d2:62:43:
73:5e:02:9f:b4:40:f1:e1:f0:a2:50:ca:dd:cf:19:
9e:4c:17:a1:74:bf:14:ce:a5:5b:74:fb:bf:c9:27:
a1:4d:06:cf:16:11:a4:7f:a8:09:d4:d7:a2:1a:c4:
3a:76:4f:d3:a0:20:9c:2a:a6:e0:b0:50:5d:7e:ba:
db:ba:8c:2b:82:e8:4c:6f:e3:31:1b:fb:a7:d7:cb:
05:74:e2:a3:71:f7:a3:40:e6:eb:89:c8:d8:f3:2e:
08:db:14:98:7f:02:85:98:f9:e6:4d:fa:04:45:b6:
eb:42:3b:4b:df:da:b0:8d:03:14:fb:94:95:d9:52:
3a:b1:32:a2:84:30:7f:af:46:7c:5b:b0:53:2b:f6:
0b:a4:ad:42:50:06:f0:10:a3:2f:21:ec:6e:b1:86:
2a:90:bd:0f:6d:38:c9:1a:74:77:53:a6:b0:09:91:
59:b7:af:c5:02:3a:d8:26:1a:b2:0f:4f:00:43:c5:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:B1:EA:F2:64:AD:5C:F4:A1:B1:FC:D7:56:8C:3F:AB:B5:07:DD
X509v3 Authority Key Identifier:
keyid:13:A5:BD:D2:D6:1E:BA:8E:FC:9C:A9:CC:63:2D:80:2A:E1:F3:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6W90tYeuo78nKnMYy2AKuHz0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/boux6vJkrVz0obH811aMP6u1B90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e43f47-4307-45e1-ac7a-5907735d391c/1/E6W90tYeuo78nKnMYy2AKuHz0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8e:71:4d:12:b8:2d:3b:9f:b4:06:aa:a3:38:07:68:db:9f:
56:9e:e1:93:b9:05:5c:f1:53:87:23:28:11:ca:52:cf:6f:d8:
1b:9a:d5:6b:98:37:b1:b9:23:8e:5d:ae:65:b6:a4:c2:c4:18:
58:e3:06:0b:ab:fd:51:d8:9e:a0:e0:bf:44:97:21:6e:5c:ba:
5c:25:03:a5:85:16:0a:f1:61:40:49:d0:df:3c:25:29:30:ab:
cd:8a:5a:00:47:09:86:61:bd:91:db:27:40:83:96:83:d4:d0:
1d:fc:a3:b8:1c:60:a9:bc:19:0a:44:ca:30:c3:f6:0f:4c:98:
ac:f8:82:c0:5e:df:5f:21:9f:54:5a:18:84:ad:6e:98:9a:8c:
b7:54:a1:6e:c3:1f:7a:c0:44:85:54:8c:83:cb:11:58:3e:92:
4b:c9:07:6e:6d:f3:4a:8f:0c:9f:3c:de:20:a4:68:ca:76:93:
a0:cd:78:ed:a7:a5:e2:22:1b:4e:93:0c:cc:2d:53:74:e2:08:
6c:0e:8f:bd:3e:cd:ae:a6:5a:b4:44:5c:90:81:c4:a0:14:66:
89:8d:c8:a4:1d:f6:94:9e:39:54:12:13:96:4a:58:7e:2c:b0:
e7:a0:84:cd:f2:a3:bc:cb:33:39:75:62:ff:c3:f1:84:22:c8:
93:86:9c:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaC8PVZZU4H+4hSVJM47IsZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYTViZGQyZDYxZWJhOGVmYzljYTljYzYzMmQ4MDJhZTFm
M2QyYzEwHhcNMjMwMjI0MTAyMTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZThiYjFlYWYyNjRhZDVjZjRhMWIxZmNkNzU2OGMzZmFiYjUwN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOhX0T6AiTZkHnpr1ac7A/oancM5
VoEzXN7WEzxKPUqkFtF0KzhLx14qB8AYXwYHUmr3uVH0ySJQ7H2XSfFMCLXXK9i+
MRnSYkNzXgKftEDx4fCiUMrdzxmeTBehdL8UzqVbdPu/ySehTQbPFhGkf6gJ1Nei
GsQ6dk/ToCCcKqbgsFBdfrrbuowrguhMb+MxG/un18sFdOKjcfejQObricjY8y4I
2xSYfwKFmPnmTfoERbbrQjtL39qwjQMU+5SV2VI6sTKihDB/r0Z8W7BTK/YLpK1C
UAbwEKMvIexusYYqkL0PbTjJGnR3U6awCZFZt6/FAjrYJhqyD08AQ8XG6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG6LseryZK1c9KGx/NdWjD+rtQfdMB8GA1UdIwQY
MBaAFBOlvdLWHrqO/JypzGMtgCrh89LBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTZXOTB0WWV1bzc4bktuTVl5MkFLdUh6MHNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lNDNmNDctNDMwNy00NWUxLWFjN2Et
NTkwNzczNWQzOTFjLzEvYm91eDZ2SmtyVnowb2JIODExYU1QNnUxQjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lNDNmNDctNDMwNy00NWUxLWFjN2EtNTkwNzczNWQzOTFj
LzEvRTZXOTB0WWV1bzc4bktuTVl5MkFLdUh6MHNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaNfMA0G
CSqGSIb3DQEBCwUAA4IBAQBmjnFNErgtO5+0BqqjOAdo259WnuGTuQVc8VOHIygR
ylLPb9gbmtVrmDexuSOOXa5ltqTCxBhY4wYLq/1R2J6g4L9ElyFuXLpcJQOlhRYK
8WFASdDfPCUpMKvNiloARwmGYb2R2ydAg5aD1NAd/KO4HGCpvBkKRMoww/YPTJis
+ILAXt9fIZ9UWhiErW6Ymoy3VKFuwx96wESFVIyDyxFYPpJLyQdubfNKjwyfPN4g
pGjKdpOgzXjtp6XiIhtOkwzMLVN04ghsDo+9Ps2uplq0RFyQgcSgFGaJjcikHfaU
njlUEhOWSlh+LLDnoITN8qO8yzM5dWL/w/GEIsiThpzw
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:48 2025 by rpki-client